14:04:46 #startmeeting tripleo 14:04:46 Meeting started Tue Nov 3 14:04:46 2015 UTC and is due to finish in 60 minutes. The chair is dprince. Information about MeetBot at http://wiki.debian.org/MeetBot. 14:04:47 Useful Commands: #action #agreed #help #info #idea #link #topic #startvote. 14:04:50 The meeting name has been set to 'tripleo' 14:05:22 hello everyone 14:05:25 o/ 14:05:32 \o 14:05:35 o/ 14:05:53 o/ 14:05:59 o/ 14:06:07 trown: thanks for the meeting ping. I would have waited another hour :) 14:06:30 hiya! 14:06:47 #topic agenda 14:06:54 * bugs 14:06:54 * Projects releases or stable backports 14:06:54 * CI 14:06:54 * Specs 14:06:54 * Review Priorities: https://etherpad.openstack.org/p/tripleo-review-priorities 14:06:57 * one off agenda items 14:06:59 * open discussion 14:07:17 anything to add to todays agenda anyone? 14:07:23 * gfidente late 14:07:47 dprince: Could we add the TLS enablement work there? 14:08:01 in reviews /priorities i guess 14:08:19 https://review.openstack.org/#/c/231930/ 14:08:23 dprince: I dont think it was discussed in a tripleo context on summit, but it looks like DLM is a thing for mitaka 14:08:29 dprince: https://trello.com/c/G5kyYZ5e/103-add-dlm-support card for RDO 14:09:00 jaosorior: yeah, lets get that in review priorities as marios suggests 14:09:11 jaosorior: thanks for mentioning 14:10:02 trown: ack on DLM 14:10:35 trown: lets perhaps get that in open discussion (hopefully we get there in time) 14:10:46 dprince: works for me 14:11:26 #topic bugs 14:11:47 any major bugs come up in the past two weeks? 14:12:51 I still see a few bugs coming in that are related to the old tripleo-incubator workflow 14:13:03 perhaps we should add a DEPRECATED file to that project now? 14:13:30 or at least to the devtest_ scripts... 14:15:05 the devtest scripts are still used in instack-virt-setup would be the only thing 14:15:32 trown: good point, perhaps we skip devtest_testenv.sh maybe? 14:15:36 dprince: probably a few bugs at https://bugs.launchpad.net/tripleo/ that need closing, example https://bugs.launchpad.net/tripleo/+bug/1239450 14:15:36 Launchpad bug 1239450 in tripleo "nova floating-ip extension doesn't work on overcloud" [High,Triaged] 14:16:13 dprince: wasn't there a thought a while back about pulling the scripts we still use out of incubator? into common possibly 14:16:26 dprince: but this discussion is getting away from bugs 14:16:56 marios: re https://bugs.launchpad.net/tripleo/+bug/1239450 I think that could be closed 14:16:57 Launchpad bug 1239450 in tripleo "nova floating-ip extension doesn't work on overcloud" [High,Triaged] 14:18:00 dprince: we probably still incidentally use quite a few more of those, like wait-for or create-nodes being called 14:18:17 marios: any yes, we are starting to gradually pull the things into the incubator. Some of Brad's recent patches look promising 14:18:27 https://review.openstack.org/#/c/235569/ for example is the build-images patch 14:19:06 any other bugs, probably a slow week because of Summit 14:20:06 #topic Projects releases or stable backports 14:20:40 shardy: any updates on the stable branches stuff? You've made good progress on this right? 14:21:07 I think shardy is mostly afk 14:21:08 [08:51] dprince: Hey, apologies but I can't make the meeting today due to a conflict 14:21:09 dprince: he said he had a conflict, lurking 14:21:12 did we bump the tags in the master branches? 14:21:33 i'd think we'd need to at least bump the .Y's there, so we can increment .Z's in the stable branches 14:21:40 yep 14:21:42 slagle: not sure, lets action that 14:21:47 although since we're backporting features, maybe we should bump the X? 14:22:15 slagle: but we are not backporting breaking features 14:22:48 #action bump the version of the master branches so we can release stable 14:22:48 semver says to bump .Y for new features to the "api" 14:23:13 so if we wanted to be strict about that, we'd need to bump .Y in the stable branches 14:23:14 ah, ok... guess we need to bump X 14:23:21 for master 14:23:41 probably safer to use the big hammer for this. No harm in bumping X right? 14:23:51 that would mean making some stuff 1.0.0 14:24:02 not sure if that actually has any significance or not 14:24:23 slagle: yeah, perhaps a mailing list thread would help further discuss 14:25:14 either way 14:25:40 any other stable branch stuff? 14:26:28 #topic CI 14:26:52 CI looks to have been fairly stable this past week or so 14:27:29 we agreed at the Summit to have add a few more CI jobs 14:27:45 derekh: any CI specific updates? 14:27:48 dprince: fyi will be adding aping test for toci_instack soon 14:27:57 dprince: https://trello.com/c/OQlIbGoK/19-toci-start-a-user-instance-and-ping-it 14:28:12 dprince: no thing I can think of at the moment 14:28:23 marios: cool, will be nice to have that again 14:28:32 discussed a bit with derekh and slagle, first part is like https://review.openstack.org/#/c/241167/ 14:28:37 marios: on that, you might consider using a Heat stack to drive it? 14:28:43 marios: that way we get Heat coverage 14:28:54 dprince: sorry you cought me on the hope, calender was out by an hour 14:29:06 *hop 14:29:07 marios: also, would be good to (like devtest_overcloud.sh) make the instance volume backed... so that we cover Cinder/Ceph too 14:29:15 dprince: so here's the thing 14:29:26 dprince: really, we don't want to write any tests. run tempest 14:29:28 derekh: me too, trown reminded us 14:29:39 dprince: like smoketests will do all those things for example 14:30:02 dprince: so the idea was to just carry a simple ping test locally, but eventually go to running tempest against the overcloud 14:30:32 marios: agree with eventually running tempest if we have time 14:31:04 marios: and I agree with a simple ping test for now. Rather than drive it w/ Nova I was just suggesting that using Heat would get us a bit more coverage 14:31:23 does adding it to a heat stack really add that much complication to the implementation? 14:31:36 I think the value is pretty high coverage wise 14:31:36 dprince: sure, i hadn't thought about that and can investigate it. just saying, there are a number of things to test (when you said about the volumes etc) 14:32:01 marios: the previous devtest_overcloud.sh coverage gave us minimum Cinder/Ceph coverage 14:32:14 dprince: i'd also be happy to work on more test cases/coverage if that is a worthwhile thing to have 14:32:16 marios: glance image -> converted to a volume 14:32:44 dprince: ack, will revisit. just mentioning it, as you can see my ping test is still wip, today. 14:33:35 marios: but I'm really glad to see work on this. Just having the same coverage we had before would be great 14:33:40 marios: http://git.openstack.org/cgit/openstack/tripleo-incubator/tree/scripts/devtest_overcloud.sh#n671 14:34:15 actually now that I think of it, I've been working on using a mirror for the puppet modules we pull from github, wouldn't mind is somebody could take a look https://review.openstack.org/#/c/238414/ 14:34:47 derekh: ack 14:35:28 derekh: oh, and I had a thought about the idea of using rsync or swift to deploy the modules 14:35:35 marios: cool. were you able to copy from instack-test-overcloud at all? if not, no worries, but it's there if you need any pointers 14:35:59 derekh: if we do that, it means our CI only needs to pull the modules once. Where as now it pulls them for the instack install, and the overcloud image build 14:36:09 derekh: so a slight optimization... 14:36:17 slagle: so the bulk of the bash is from earlier - can't remember where i lifted it from, when we were in the business of init the overcloud tenant stuff 14:36:30 slagle: can't remember if i looked at instack-test-overcloud 14:36:31 dprince: this patch is supposed to fix the double pull https://review.openstack.org/#/c/237929/3 14:36:47 dprince: but you right swift would do it too 14:37:39 slagle: oh, that looks very useful :) 14:37:52 derekh: yeah, a bit less fragile than optimizing it in our CI 14:38:05 any other CI things? 14:38:12 marios: and most of that came from devtest_overcloud :) 14:38:13 slagle: so why aren't we using that in ci? 14:38:26 i think we meant to 14:38:30 just forgot to tack it on 14:38:47 dprince: nothing from me 14:38:57 ok, well do you still think it makes sense for this stuff to live in tripleo.sh? let's discuss offline 14:39:06 #topic Review Priorities: https://etherpad.openstack.org/p/tripleo-review-priorities 14:39:25 could we pick up the TLS stuff? I gotta go in around 10 min :/ 14:39:29 trown: you meantioned TLS 14:39:37 #link https://review.openstack.org/#/c/231930/ 14:40:09 dprince: nope I mentioned a different three letter acronym :) 14:40:11 jaosorior: this is blocked on the puppet keystone stuff 14:40:32 jaosorior: which I think is getting some love now, so I'd expect more eyes on this soon 14:40:53 dprince, well,the patch it depends on which is this one https://review.openstack.org/#/c/230375/39 only needs a workflow 14:40:58 and there was another one that was merged already 14:41:17 Also https://review.openstack.org/#/c/238887/ is part of the chain of CRs after it we'd like some eyes on re the general approach 14:41:20 but I already did the splitting of the TLS patch as suggested by marios 14:42:59 so the patch that tremble is pointing to, mostly is work directed towards making the TLS patch more testable 14:43:18 did anyone test stack-update'ing a cloud that was deployed with os-cloud-config keystone to one that uses puppet managed keystone? 14:43:40 i was doing this for the parallel patch for the undercloud, and it was failing pretty badly 14:43:52 jaosorior: okay, I've added it to review priorities 14:43:57 jaosorior: thanks for highlighting this 14:44:15 currently the keystone endpoints are IPs, which is not something that's very easily tested if we want to start deploying the certificates; on the other hand, we also make the ports and the protocol (http or https) configurable 14:44:24 and in one single place 14:44:55 slagle: not me 14:45:11 slagle: perhaps we should wait until our "upgrades" CI job is in place before landing? 14:45:45 one thing I was thinking about the upgrade job, it seems to be we'll want to use some 'upgrade.yaml' in the upgrade job 14:46:05 and we probably want this to be in the tht repo itself, sounds valid? 14:46:27 gfidente: you mean a heat environment that contains settings users who upgrade will need? 14:46:30 dprince: that would be ideal, but i dont know that we need to completely block on it. i might try it locally if i get the time 14:46:38 dprince, yes 14:47:07 slagle: okay, perhaps we just need to leave clear notes on these reviews so we don't miss this 14:47:13 one option is for me to cherry-pick the TLS and root CA cert injection and make them depend on the current master 14:47:22 slagle: I think I +2'd them already without thinking of this 14:47:35 dprince, I am not sure if and how this should be maintained though, it might be dependent on which version one wants to update from 14:47:51 but but this patch https://review.openstack.org/#/c/238887/ and the subsequent ones are needed to test the tLS stuff 14:49:35 jaosorior: okay, are the CI failures in that series valid 14:50:02 just noticing a few of them are failing 14:50:04 dprince, which CI failures? 14:50:08 dprince: The Syntax/lint ones are unrelated 14:50:27 yeah those are new and haven't got to pass yet afaik 14:50:29 ah right, yeah. Just those 14:50:42 looks like the "tripleo" ones are all fine 14:50:55 dprince, currently CI is running them again since I just split some patches into smaller ones. But functional test were passing 14:51:15 dprince: Syntax/lint ones are fixed by https://review.openstack.org/#/c/225664/ 14:51:56 cool, any other reviews to talk about this week? 14:52:12 hey guys, I gotta go. But thanks for taking the TLS parts into account. Any reviews would be greatly appreciated :) 14:53:03 #topic open discussion 14:53:15 trown: you mentioned DLM 14:53:23 yep that is the acronym :) 14:53:43 but ya I just wanted to put that on the radar for mitaka 14:53:48 trown: yeah, second time I got it 14:54:07 trown: cool, do you see this as something we'd need to SPEC out? 14:54:11 looks like we will need to setup zookeeper on the undercloud 14:54:23 and probably overcloud too 14:54:40 trown: any links for background/context 14:55:00 marios: https://trello.com/c/G5kyYZ5e/103-add-dlm-support is the RDO card for it 14:55:26 zookeeper is not even packaged yet, so it is not a right now thing as much as a by the end of mitaka thing 14:55:34 trown: thanks 14:56:30 it also has upgrade implications as far as the migration from db-backed locks to DLM 14:57:13 trown: okay, thanks for the heads up on this 14:58:12 any other items, issues to bring up this week 14:58:25 next meeting will be in a week 15:00:11 thanks everyone 15:00:14 #endmeeting